@@ -300,7 +300,15 @@ func (p *OAuthProxy) SetCSRFCookie(rw http.ResponseWriter, req *http.Request, va
302func (p *OAuthProxy) ClearSessionCookie(rw http.ResponseWriter, req *http.Request) {
302func (p *OAuthProxy) ClearSessionCookie(rw http.ResponseWriter, req *http.Request) {
303− http.SetCookie(rw, p.MakeSessionCookie(req, "", time.Hour*-1, time.Now()))
303+ clr := p.MakeSessionCookie(req, "", time.Hour*-1, time.Now())
304+ http.SetCookie(rw, clr)
306+ // ugly hack because default domain changed
307+ if p.CookieDomain == "" {
309+ clr2.Domain = req.Host
310+ http.SetCookie(rw, &clr2)
306func (p *OAuthProxy) SetSessionCookie(rw http.ResponseWriter, req *http.Request, val string) {
314func (p *OAuthProxy) SetSessionCookie(rw http.ResponseWriter, req *http.Request, val string) {